The Life of an e-mail Virus
By Saul Klein
Internet Crusades
www.InternetCrusade.com
1. An e-mail with a virus attached is sent:
- To someone who does not have Anti-Virus Software on their computer
- To someone who has Anti Virus Software on their computer but who has not updated by downloading the latest virus definitions and installing them
- To someone prior to the Anti Virus Software companies creating the “cure” for a recently released virus
2. The virused e-mail is open (or viewed through the preview pane) and “infects” the recipient’s computer. The virus then:
- Creates an e-mail message (not detectable in the outbox) on the newly infected computer
- Pulls an e-mail address at random out of the e-mail address book of the newly infected computer and puts it in the “From Field” of the newly created e-mail message (“Spoofs” the “From Field”)
- Puts some text in the subject field
- Attaches a copy of the virus to the newly created e-mail message
- Sends the e-mail with the virus attached to many of the addresses in the address book of the newly infected computer
Results:
The virus is received by those to whom it is sent and the above cycle begins again.
Those who receive the virus may think that the virus was sent by the “Spoofed” e-mail address in the “From Field.” Remember, the person in the from field DID NOT SEND THE VIRUS.
Some of the virus protection software on the computers to which the new virused e-mail message was sent detects the virus and is set (a setting in the Anti Virus Software) to send a response to the e-mail address in the “From Field” when it detects (and fixes, deletes, or
quarantines) a virus.
When this happens, the e-mail that states “a virus has been sent by you” is being sent to someone WHO DID NOT SEND THE VIRUS (misdirected because of the “Spoofed From Field”). This is why you may be receiving e-mail messages that say you have sent a virus, and you know you did not. You did not send a virus but your e-mail address was the e-mail address that appeared in the “From Field” of an e-mail message with a virus attached.
You may also receive auto responders you did not request...guess what, if your e-mail address is in the “From Field” of an e-mail message sent to an auto responder, you will receive the auto response even though you did not request it...if your e-mail address is in the “From Field.” It doesn’t matter that you did not send the request, the auto responder “thinks” you sent it.
What can you do?
Update your Anti Virus Software. Put it in “automatic” so it updates itself when you go on line and notifies you after the update is complete.
Calendar